mirrors/pleroma
1
0
Fork 0
mirror of https://git.pleroma.social/pleroma/pleroma.git synced 2024-12-23 16:40:29 +00:00
Code Issues Projects Releases Wiki Activity

Preserve state in oauth

Browse source
This commit is contained in:
Roger Braun 2017-09-14 09:29:51 +02:00
parent a8701282d4
commit ac3f32da7e
2 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
lib/pleroma/web/oauth/oauth_controller.ex
View file

@ -10,7 +10,8 @@ defmodule Pleroma.Web.OAuth.OAuthController do
response_type: params["response_type"], response_type: params["response_type"],
client_id: params["client_id"], client_id: params["client_id"],
scope: params["scope"], scope: params["scope"],
redirect_uri: params["redirect_uri"] redirect_uri: params["redirect_uri"],
state: params["state"]
} }
end end
@ -25,6 +26,11 @@ defmodule Pleroma.Web.OAuth.OAuthController do
} }
else else
url = "#{redirect_uri}?code=#{auth.token}" url = "#{redirect_uri}?code=#{auth.token}"
url = if params["state"] do
url <> "&state=#{params["state"]}"
else
url
end
redirect(conn, external: url) redirect(conn, external: url)
end end
end end

1
lib/pleroma/web/templates/o_auth/o_auth/show.html.eex
View file

@ -10,5 +10,6 @@
<%= hidden_input f, :response_type, value: @response_type %> <%= hidden_input f, :response_type, value: @response_type %>
<%= hidden_input f, :redirect_uri, value: @redirect_uri %> <%= hidden_input f, :redirect_uri, value: @redirect_uri %>
<%= hidden_input f, :scope, value: @scope %> <%= hidden_input f, :scope, value: @scope %>
<%= hidden_input f, :state, value: @state%>
<%= submit "Authorize" %> <%= submit "Authorize" %>
<% end %> <% end %>